CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1586

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compile_xclass_matchingpath() function of the pcre2_jit_compile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in case-less matching within JIT.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 57.3%

CVSS Severity

CVSS v3 Score 9.1

CVSS v2 Score 6.4

References

Products affected by CVE-2022-1586

Netapp » Active Iq Unified Manager » Version: N/A

cpe:2.3:a:netapp:active_iq_unified_manager:-
Netapp » Hci Management Node » Version: N/A

cpe:2.3:a:netapp:hci_management_node:-
Netapp » Ontap Select Deploy Administration Utility » Version: N/A

cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-
Netapp » Solidfire » Version: N/A

cpe:2.3:a:netapp:solidfire:-
Pcre » Pcre2 » Version: N/A

cpe:2.3:a:pcre:pcre2:-
Pcre » Pcre2 » Version: 10.00

cpe:2.3:a:pcre:pcre2:10.00
Pcre » Pcre2 » Version: 10.10

cpe:2.3:a:pcre:pcre2:10.10
Pcre » Pcre2 » Version: 10.20

cpe:2.3:a:pcre:pcre2:10.20
Pcre » Pcre2 » Version: 10.21

cpe:2.3:a:pcre:pcre2:10.21
Pcre » Pcre2 » Version: 10.22

cpe:2.3:a:pcre:pcre2:10.22
Pcre » Pcre2 » Version: 10.23

cpe:2.3:a:pcre:pcre2:10.23
Pcre » Pcre2 » Version: 10.30

cpe:2.3:a:pcre:pcre2:10.30
Pcre » Pcre2 » Version: 10.31

cpe:2.3:a:pcre:pcre2:10.31
Pcre » Pcre2 » Version: 10.32

cpe:2.3:a:pcre:pcre2:10.32
Pcre » Pcre2 » Version: 10.33

cpe:2.3:a:pcre:pcre2:10.33
Pcre » Pcre2 » Version: 10.34

cpe:2.3:a:pcre:pcre2:10.34
Pcre » Pcre2 » Version: 10.35

cpe:2.3:a:pcre:pcre2:10.35
Pcre » Pcre2 » Version: 10.36

cpe:2.3:a:pcre:pcre2:10.36
Pcre » Pcre2 » Version: 10.37

cpe:2.3:a:pcre:pcre2:10.37
Pcre » Pcre2 » Version: 10.38

cpe:2.3:a:pcre:pcre2:10.38
Pcre » Pcre2 » Version: 10.39

cpe:2.3:a:pcre:pcre2:10.39
Netapp » H300s » Version: N/A

cpe:2.3:h:netapp:h300s:-
Netapp » H410c » Version: N/A

cpe:2.3:h:netapp:h410c:-
Netapp » H410s » Version: N/A

cpe:2.3:h:netapp:h410s:-
Netapp » H500s » Version: N/A

cpe:2.3:h:netapp:h500s:-
Netapp » H700s » Version: N/A

cpe:2.3:h:netapp:h700s:-
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35
Fedoraproject » Fedora » Version: 36

cpe:2.3:o:fedoraproject:fedora:36
Netapp » H300s Firmware » Version: N/A

cpe:2.3:o:netapp:h300s_firmware:-
Netapp » H410c Firmware » Version: N/A

cpe:2.3:o:netapp:h410c_firmware:-
Netapp » H410s Firmware » Version: N/A

cpe:2.3:o:netapp:h410s_firmware:-
Netapp » H500s Firmware » Version: N/A

cpe:2.3:o:netapp:h500s_firmware:-
Netapp » H700s Firmware » Version: N/A

cpe:2.3:o:netapp:h700s_firmware:-
Redhat » Enterprise Linux » Version: 8.0

cpe:2.3:o:redhat:enterprise_linux:8.0
Redhat » Enterprise Linux » Version: 9.0

cpe:2.3:o:redhat:enterprise_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1586

Products

Pricing

Contact Us